Last month, information associated with more than 100 million LinkedIn accounts has emerged online, and malicious campaigns that abuse this user data have started to appear.
read more
Trihedral Patches Flaws in SCADA Software
Trihedral Engineering, a Canada-based company that specializes in developing software for SCADA systems, has patched several remotely exploitable vulnerabilities in its VTScada product.
read more
Chrome Flaw Allowed Hackers to Run Malicious Code via PDFs
A serious Chrome vulnerability patched recently by Google allowed hackers to execute arbitrary code on a system by using malicious PDF documents.
The vulnerability, discovered by Aleksandar Nikolic of Cisco Talos, is a heap buffer overflow (CVE-2016-1681) affecting PDFium, the default PDF reader in the Chrome web browser.
read more
DoS Vulnerability Affects Cisco, Juniper Products
A vulnerability affecting routers and switches from Cisco and Juniper Networks can be exploited by remote attackers to cause the devices to enter a denial-of-service (DoS) condition.
read more
Are Your Applications Really Protected? It’s All About the Pivot
Hackers are human. Hopefully that doesn’t surprise you too much. Being human means that they are subject to human tendencies, like taking the path of least resistance.
read more
32 Million Twitter Credentials Emerge on Dark Web
A hacker claims to be sitting on more than 32 million Twitter account credentials with plans to sell the account details on the Dark Web.
read more
Traditional Industries Increasingly Turn to Bug Bounty Programs
The number of bug bounty programs launched over the past year has increased considerably and more than a quarter of programs are run by larger organizations in more “traditional” sectors, according to Bugcrowd’s second annual State of Bug Bounty Report.
read more
Samsung Patches Device Takeover Vulnerability in Galaxy Devices
Samsung this week released a new set of security patches for its Android devices, addressing many of the vulnerabilities that Google resolved in the June 2016 Android security updates, along with various other flaws in its products that were disclosed in the past months.
read more
Morgan Stanley to Pay $1 Million Penalty Over Customer Data Theft
Banking giant Morgan Stanley will pay $1 million as penalty for failure to protect information on roughly 730,000 of its clients, the Securities and Exchange Commission (SEC) said Wednesday.
read more
Attackers Leave Server Credentials in Ransomware’s Code
Ransomware is currently one of the largest cyber-threats out there, affecting enterprises and individuals alike, but every now and then the cybercriminals behind such malicious applications make critical mistakes.
read more
